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IN THE CLAIMS 



1. (currently amended) A method of detecting unauthorized actions with respect 
to on crypt o d data content on a media disk, the media disk including a first portion for pre- 
recorded content and a second portion for written content, the method comprising: 

reading an identifier on the media dis k, wherein th e id e ntifi e r includ e s on e or 
more sections located in ono of tho first portion for pre -recorded content, th e s e cond 



portion for writt e n cont e nt, and both th e first portion for pre r e cord e d cont e nt and th e 
second portion for written eeateftt; 

determining whether the identifier was located in the first or second portion of the 
media disk includes a s ection located in tho Qoe ond portio n- written content ; 



comparing th e id e ntifi e r with on e or mor e pr e d e t e rmin e d typ e s of id e ntifi e rs for 



which a section is locate d i n t ho s econd por 4tea4er-A vritton content; 

determining whether the identifier identifies itself as a pre-recorded identifier or 
as a written identifier: 

and if the identifier identifies itself as a pre-recorded identifier and is located in 
the second portion of the media disk is of a typ e that is on e of th o ono or more 
predetermin e d typ e s of identifi e rs , detecting an unauthorized action. 



2. (original) The method of claim I wherein the reading of the identifier on the 
media disk is during a media disk access operation including one or more of record, play, 
get play key, copy, open, close and create. 
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3. (original) The method of claim 2 wherein functionality for the media access 
disk operation is revoked after detecting the unauthorized action. 

4. (cancelled) 

5. (cancelled) 

6. (original) The method of claim 1 wherein the media disk is one of a media disk, 
a compact disk, a digital video disk, and other digital storage mediums. 

7. (cancelled) 

8. (cancelled) 

9. (original) The method of claim 1 wherein the identifier is a seed for a key 
generator, the key generator retrieving one or more keys from a key box, the keys for one 
or more of unlocking and decrypting files on a media disk. 

10. (cancelled) 

1 1 . (original) The method of claim 1 wherein the detection of an unauthorized 
action results in the validation function providing a failure indication. 
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12* (original) The method of claim 2 wherein detection of an unauthorized action 
results in revocation of functionality for the media disk access operation. 

13. (original) The method of claim 1 wherein the method for detecting 
unauthorized actions occurs when a media disk is accessed by an engine under a digital 
rights management protocol. 



14. (original) The method of claim 1 wherein the identifier is located on a media 
disk coupleable to a host, the host being one of an engine, a device that embeds an 
engine, a third party digital rights management protocol, an application running in an 
open computing environment, and a clearinghouse server. 
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15. (currently amended) An apparatus for detecting unauthorized actions with 
respect to encrypted data on a media disk, the media disk including a first portion for pre- 
recorded content and a second portion for written content, the apparatus comprising: 

means for reading an identifier on the media dis k, wh e r e in th e id e ntifi e r includes 
Q - or - mor e- a e otions r locat e d in on e of the first portion for pr e r e cord e d cont e nt, th e 



s e cond portion for writt e n cont e nt, and both tho first portion for pro rooordod contont and 
tho Gocond portion for written oontont ; 

means for determining whether the identifier was located in the first or in the 
second portion of the disk comparing th e id e ntifier with on e or more pr e d e t e rmin e d types 
of identifiers - for - which a - section looatod in tho Gocond portion for writton oontont is not 
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authoriz e d if th e id e ntifier incIud a s - a - s & oti & n - lQcat e d - inthe - s e cond portion for written 
content ; 

means for detenninina whether the identifier identifies itself as a pre-recorded 
identifier or as a written identifier: 

and means for detecting an unauthorized action if the identifier identifies itself as 
a pre-recorded identifier and is located in the second portion of the media disk is of a tvpo 
that is one of the one or more predetermined typ e s of id e ntifi e rs . 

16. (cancelled) 

17. (original) The apparatus of claim 15 wherein the means for reading of the 
identifier includes a media disk access component. 

1 8. (original) The apparatus of claim 1 5 wherein the means for reading the 
identifier operates during an access operation. 



19. (cancelled) 



20. (cancelled) 
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21 . (original) The apparatus of claim 1 5 wherein the identifier is a seed for a 
cryptographic key box, the key box using the identifier to retrieve one or more keys for 
unlocking files on a media disk. 
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22. (currently amended) An engine configured to detect unauthorized actions with 
respect to encrypted data on a media disk, the media disk including a first portion for pre- 
recorded content and a second portion for written content, the engine comprising: 

a firmware component located on an application specific integrated circuit 
(ASIC), the firmware component including: 

a block configured to read an identifier on the media disk , wh e rein th e identifier 
includes one or moro G o otionc locat e d in on e of th e first portion for pr e- r e cord e d content, 
th e s e cond portion for written content and both the first portion for pr e r e cord e d content 
and the second - portion for writt e n cont e nt ; 

a block configured to determine whether the identifier was located in the first or 
the second portion of the media disk: compare the identifier with one or mor e 
predetermined typos of idontifiora for which a Gootion located in the cooond portion for 
writton c ontent io not authoriz e d if th e id e ntifier includ e s a s e ction locat e d - in - th e s e cond 
portion for written cont e nt; and 

a block configured to determine whether the identifier identified itself as a pre- 
recorded identifier or as a written identifier: and 

a block te configured to detect an unauthorized action if the identifier was located 
in the second portion and identified itself as a pre-recorded identifier is of a typo that ia 
ono of th e- on e- or - mor e pr e d e t e rmin e d typ e s of id e ntifi e rs . 
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23. (cancelled) 
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